CVE-2024-45601

CVSS V2 None CVSS V3 None

Description

Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files not intended to be served. Users are strongly advised to update to the latest version of Mesop immediately. The latest version includes a fix for this vulnerability. At time of publication 0.12.4 is the most recently available version of Mesop.

Overview

CVE ID
CVE-2024-45601

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-09-18T17:49:58.158Z

Last Modified Date
2024-09-18T18:42:23.239Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://github.com/google/mesop/security/advisories/GHSA-pmv9-3xqp-8w42	x_refsource_CONFIRM
https://github.com/google/mesop/commit/17fb769d6a91f0a8cbccfab18f64977b158a6a31	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-45601
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45601

History

Created	Old Value	New Value	Data Type	Notes
2024-10-06 04:19:44				Added to TrackCVE